$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft File: 309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft (raw, json) Hash identifier: 4BvaEIDFxKn4QUaisji+5LmBIdEvzWdedphl/A0G8GM= Subject key identifier: E6:4D:45:B6:77:60:3C:A2:23:3C:36:62:A4:4C:E7:78:BF:53:AF:68 Authority key identifier: 30:9C:25:E7:B1:8F:F2:8A:60:B9:6B:25:57:2F:8A:9E:31:04:FE:76 Certificate issuer: /CN=309C25E7B18FF28A60B96B25572F8A9E3104FE76 Certificate serial: 11AFC0E3E9CA220B0E7232FC3B4786E90E21BA19 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft Manifest number: 0188 Signing time: Mon 30 Jun 2025 15:19:06 +0000 Manifest this update: Mon 30 Jun 2025 15:14:06 +0000 Manifest next update: Tue 01 Jul 2025 15:29:06 +0000 Files and hashes: 1: 326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (hash: WZAT+2UnkuTeDpADo9xuR0pPXroOCLJbbHfxikcVv24=) 2: 326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (hash: w5dnEiDx5goNVTXWdKgSFg9sD6RUplNurP3xamwPNaQ=) 3: 326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa (hash: Nnbe/4zszjgo0YB55Fou4Wds93r5DpKEFbS0MZw1LSo=) 4: 326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa (hash: LBWSPbWdHS2qLW48sBVvajPcn95MUvX0AUIFyg2pSwE=) 5: 326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (hash: Iz/fbYS1/cy8A5fLPahpzYYMJ+9YAFFxOvqGD55PuMM=) 6: 326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa (hash: MYzoD8wbCOxI3VM/BdbUpxOg1cHoSa/pKdV7AMYn73k=) 7: 326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (hash: cKtVijhwYzD8lUknL4bLGAreJBVYSaklclbPuDAhlM4=) 8: 309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl (hash: nzXTvpyAi+xjuHEVZdYqz7vSoSpXNBi2Yf15BUPcqog=) 9: 326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (hash: FI47MURWTFWikQVohyPC3i+m6GkNNvGpYuxpgU2LP/Q=) 10: 326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa (hash: cwd5LxUfGqT7a9/Pajk8lfNPUrL3p3IC+JEphw9tMJU=) 11: 326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa (hash: vmCZ6eOm5tS7bNiPnlTdd4xzZjSjYpY8TXILOA0OmSc=) 12: 326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (hash: dOsy+R+Pu+oAZfnInfj1QRHz0MdLjsjFwXGn7V3VRV4=) 13: 326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (hash: 92+lsmyfA1dbS5hvoEPYQjapfeES/k8FUYGANJUnv7Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 15:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:af:c0:e3:e9:ca:22:0b:0e:72:32:fc:3b:47:86:e9:0e:21:ba:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309C25E7B18FF28A60B96B25572F8A9E3104FE76 Validity Not Before: Jun 30 15:14:06 2025 GMT Not After : Jul 1 15:29:06 2025 GMT Subject: CN=E64D45B677603CA2233C3662A44CE778BF53AF68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c6:be:bc:85:d4:0a:2f:7c:e3:25:aa:f6:30: 1c:07:92:84:23:ee:a3:d4:21:8a:d7:97:f5:bd:5e: 05:0a:68:b1:94:9b:6b:62:20:43:ad:9a:a9:af:ed: 56:b6:a9:4a:ac:8e:9d:d9:23:03:e3:d0:c9:6a:b7: ad:68:fd:0c:b3:0c:00:86:8d:83:cd:a2:bf:31:69: d6:54:62:c4:dc:0e:3c:b8:0d:99:62:aa:3f:c8:f8: f9:95:40:22:36:6d:30:c1:50:84:a7:44:83:3a:fc: 74:02:9b:73:25:4a:e1:52:25:dd:c2:1b:8d:cc:05: 80:75:33:1f:83:be:a2:1b:04:67:97:ef:47:3b:7b: 5d:c9:ea:a1:9b:1d:c7:74:eb:86:25:5c:64:b6:45: d7:19:3c:ef:01:2e:97:57:73:aa:e7:f2:a7:79:21: bc:4a:47:58:48:5d:ee:ad:70:42:bf:f6:13:1c:5c: 20:e6:6c:5c:da:0a:ad:22:0c:a4:31:68:86:88:a9: d9:d5:3a:20:22:a8:21:81:6c:43:8e:cc:95:2b:ac: 2a:9c:9f:5a:b2:ed:de:25:71:15:16:ea:e9:28:0f: af:a6:b7:a5:b1:f0:e0:80:97:31:5b:5e:61:be:1f: 25:56:6d:34:f0:c1:c9:99:99:bb:98:3a:19:0d:9e: 1b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:4D:45:B6:77:60:3C:A2:23:3C:36:62:A4:4C:E7:78:BF:53:AF:68 X509v3 Authority Key Identifier: keyid:30:9C:25:E7:B1:8F:F2:8A:60:B9:6B:25:57:2F:8A:9E:31:04:FE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:11:f1:12:03:d4:4b:43:75:a9:9d:77:52:39:51:c2:f9:98: 8b:9d:e0:84:a2:35:8c:0f:18:3e:c1:20:d2:5c:c5:4c:bd:c1: 9b:6f:97:f4:12:29:c0:34:63:ea:8e:4d:48:0f:f0:28:68:26: 1e:46:6c:5e:71:5f:21:fc:b9:5d:26:41:fa:14:25:d4:6d:31: ad:fe:ab:b7:57:5f:38:27:78:22:6e:c1:aa:2d:b8:7b:d2:90: 4b:9a:48:a1:bc:de:d4:d6:b4:b9:cc:e9:c2:d6:b1:ea:42:bd: 57:23:4a:bd:a8:e8:84:10:a7:06:c4:8c:01:35:50:d5:e2:2a: fe:f7:23:04:f9:36:e5:f2:21:a5:0f:9b:f7:9a:77:03:c6:bb: 67:65:11:bd:af:89:3a:b1:8c:3c:b2:e6:19:b1:80:64:3b:04: c1:f3:f8:85:e6:c5:64:32:2e:6a:ef:b4:b3:ad:8a:6c:87:14: 52:95:ef:b8:66:f4:ec:f7:ba:75:2e:3c:61:05:94:33:f5:de: e5:06:0e:14:8d:3b:0b:d1:a6:69:ab:11:a8:36:87:65:58:35: d5:08:8c:8d:18:4b:b8:85:89:4a:37:d8:e8:60:41:a2:e8:9b: 95:93:2c:22:a9:53:da:b2:30:f4:66:46:2c:73:34:c4:db:ad: 78:81:b9:45 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUEa/A4+nKIgsOcjL8O0eG6Q4huhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA5QzI1RTdCMThGRjI4QTYwQjk2QjI1NTcyRjhBOUUz MTA0RkU3NjAeFw0yNTA2MzAxNTE0MDZaFw0yNTA3MDExNTI5MDZaMDMxMTAvBgNV BAMTKEU2NEQ0NUI2Nzc2MDNDQTIyMzNDMzY2MkE0NENFNzc4QkY1M0FGNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/xr68hdQKL3zjJar2MBwHkoQj 7qPUIYrXl/W9XgUKaLGUm2tiIEOtmqmv7Va2qUqsjp3ZIwPj0Mlqt61o/QyzDACG jYPNor8xadZUYsTcDjy4DZliqj/I+PmVQCI2bTDBUISnRIM6/HQCm3MlSuFSJd3C G43MBYB1Mx+DvqIbBGeX70c7e13J6qGbHcd064YlXGS2RdcZPO8BLpdXc6rn8qd5 IbxKR1hIXe6tcEK/9hMcXCDmbFzaCq0iDKQxaIaIqdnVOiAiqCGBbEOOzJUrrCqc n1qy7d4lcRUW6ukoD6+mt6Wx8OCAlzFbXmG+HyVWbTTwwcmZmbuYOhkNnhtjAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU5k1FtndgPKIjPDZipEzneL9Tr2gwHwYDVR0j BBgwFoAUMJwl57GP8opguWslVy+KnjEE/nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzAvMzA5QzI1RTdCMThGRjI4QTYwQjk2QjI1NTcyRjhBOUUzMTA0RkU3Ni5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzMwOUMyNUU3QjE4RkYy OEE2MEI5NkIyNTU3MkY4QTlFMzEwNEZFNzYuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1Y2U3 LzAvMzA5QzI1RTdCMThGRjI4QTYwQjk2QjI1NTcyRjhBOUUzMTA0RkU3Ni5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAGYR8RID1EtDdamdd1I5UcL5mIud4ISiNYwPGD7BINJcxUy9wZtvl/QS KcA0Y+qOTUgP8ChoJh5GbF5xXyH8uV0mQfoUJdRtMa3+q7dXXzgneCJuwaotuHvS kEuaSKG83tTWtLnM6cLWsepCvVcjSr2o6IQQpwbEjAE1UNXiKv73IwT5NuXyIaUP m/eadwPGu2dlEb2viTqxjDyy5hmxgGQ7BMHz+IXmxWQyLmrvtLOtimyHFFKV77hm 9Oz3unUuPGEFlDP13uUGDhSNOwvRpmmrEag2h2VYNdUIjI0YS7iFiUo32OhgQaLo m5WTLCKpU9qyMPRmRixzNMTbrXiBuUU= -----END CERTIFICATE-----Generated at Tue Jul 1 06:57:08 2025 by rpki-client